Cisco Spark / SSO / ADFS

[Thomas Scheible]

Have you any instructions to enable SSO with Microsoft ADFS 2.0?

I found this article, I which stands that ADFS adds attributes to the trust metadata file that must be removed before you upload the file to the Cisco Collaboration Cloud, but not which attributes.

https://help.webex.com/docs/DOC-1600#CMGT_RF_S9BDF982_00

have you an further information's for this?

[lpratt]

Thomas,

That is one of the links for SSO integration. Here are a couple other links:

Set Up Single Sign-On | Cisco WebEx Help Central

Single Sign-On Capability with your Organizatio... | Cisco WebEx Help Central

Louis

[Gaurav Singhal]

Louis,

I'm getting prompted for login on these links even though it says login is not needed. How do we register? None of my webex/Spark credentials work.

-Gaurav Singhal

Presidio - TriState

[Frederick Cordero]

Single Sign-On with ADFS 2.0 Integration Guide | Cisco WebEx Help Central

[Stoyan Stoitsev]

I guess Louis sent internal links... Here's the publicly accessible one

Single Sign-On with Cisco Spark Services and yo... | Cisco Cloud Collaboration Help Central

[Gaurav Singhal]

Thanks! Was making sure I was not missing something. So, I found my customer uses Salepoint for SSO. They have bought ELA that covers Webex and Spark. Is it correct to assume that any SAML 2.0 based SSO would work with Webex/Spark? In other words if we test it and works, will it be supported?

https://www.sailpoint.com/platform/enterprise-single-sign-on-sso/

- Gaurav Singhal

gsinghal@presidio.com

860-470-1918

Presidio Tristate

[Stoyan Stoitsev]

I think so too, of course as long as they comply to the standard and can be configured in the way shown in the doc.

Also, see BRKUCC-2444

[zaferberber]

Hello,

we can not find deployment guide for F5 Networks,

who can help me

regards

zafer

[Stoyan Stoitsev]

first result on google

LMGTFY

[zaferberber]

this is intelligence. congrats

[zaferberber]

Hi All,

I followed this article https://collaborationhelp.cisco.com/article/en-us/ljazkg

Here is the my experience about F5 APM integration for only CI

1- when you configıre local IDP service you will set the certificate,  article say

"Under Security Settings, pick a certificate to sign the assertion" or " From the drop-downs, select the correct certificate for signing the assertion." it is not clear.

don't choose "sign certificate",

the correct explanation  "Under Security Settings, pick a certificate and key to sign the assertion"

2- You need create VIP and webtop profile on APM.

3- Assign trusted certificate on VIP, If not client will see untrusted error message

4- Traffic flow would be like this ;

   - email address enter on spark

   -  F5 APM will prompt you user and password (you must enter username in this section)

good luck